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(54) AUTHENTICATION DEVICE FOR TERMINAL 

(57)Abstract: 

PROBLEM TO BE SOLVED: To authenticate user and to prevent 
unauthorized use, with a simple operation. 

SOLUTION: A terminal 100 sends a user ID and a telephone number of a 
portable telephone set 10 to an information center 200. An 
authentication device 36 of the information center 200 uses a telephone 
number stored in the authentication memory 38 to authenticate the 
user and serves information for the user. Furthermore, when a 
registered telephone number is changed frequently more than a 
prescribed frequency, revision of the registered telephone number is 
inhibited. 
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(54) [Title of the Invention] AUTHENTICATION DEVICE FOR 
TERMINAL 

(57) [Abstract] 

[Object] To authenticate a user, and to prevent 
unauthorized use with a simple operation. 

[Solving Means] A terminal 100 transmits a telephone 
number of a portable telephone set 10 together with a user 
ID to an information center 200. An authentication device 
36 of the information center 2 00 uses a telephone number 
stored in an authentication memory 38 to authenticate the 
user, and supplies information to the user. When a 
registered telephone number is changed more frequently than 
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a predetermined frequency, changing of the registered 
telephone number is prohibited. 



[Claims ] 

[Claim 1] An authentication device for authenticating 
access from a terminal via a telephone, wherein 
authentication is performed by using a telephone number used 
by the terminal. 

[Claim 2] An authentication device according to Claim 1, 
wherein changing the registered telephone number is 
permitted by inputting a correct password from the terminal. 
[Claim 3] An authentication device according to Claim 2, 
wherein the frequency of changing the registered telephone 
number is monitored, and any change of the registered 
telephone number is prohibited when the frequency of 
changing is high. 

[Detailed Description of the Invention] 
[0001] 

[Technical Field of the Invention] The present invention 
relates to an authentication device for a terminal making 
access to an information center or the like for providing an 
information providing service. 
[0002] 

[Description of the Related Art] Various kinds of 
communication systems utilizing computers have become 
popular, and systems for transmitting/receiving electronic 
mail (messages) by using terminals such as portable 
terminals and in-vehicle terminals, and for utilizing on- 
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line information services have been proposed. In particular, 
there has been a growing demand for information on parking 
lots around a destination, traffic information, and on-line 
information services in moving vehicles. 

[0003] For example, Japanese Unexamined Patent Application 
Publication No. 7-105492 discloses a system capable of 
acquiring information desired by a driver (information on 
various facilities and restaurants) by utilizing an in- 
vehicle telephone set. 

[0004] The on-line information services often admit only 
previously registered users. utilization of the services is 
generally permitted after completing a procedure for 
inputting a user name, password, etc. 

[0005] 

[Problems to be Solved by the Invention] It is often 
requested that in-vehicle terminals rapidly receive 
information providing services, and it seems that some users 
feel it is troublesome to input the user name and the 
password every time the services are requested. 
[0006] Accordingly, an object of the present invention is 
to provide an authentication device for the terminal which 
is capable of simplifying the connection procedures in the 
terminal, and preventing unauthorized use. 
[0007] 

[Means for Solving the Problems] The present invention 
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relates to an authentication device for authenticating 
access from a terminal via a telephone set, and is 
characterized in that authentication is performed by using a 
telephone number used by the terminal • 

[0008] As described above, the authentication is performed 
by the telephone number used by the terminal in the present 
invention. A user of the terminal can enjoy the service 
without any input of a password by using the telephone set 
in advance. A user ID is stored in the terminal, and 
automatically transmitted. In addition, the password is 
also stored in the terminal, and automatically transmitted; 
however, the service can be enjoyed even when the terminal 
is used by anybody, and the security property is degraded. 
The service can be limited to the use of the authorized user 
by adding the limit of using the previously registered 
telephone set, and any complicate operation can be omitted. 
[0009] Further, the registered telephone number can be 
changed when the password is inputted. This is applicable 
when a telephone set is changed. 

[0010] Still further, when the frequency of changing the 
registered telephone number is high, any change of the 
registered telephone number is prohibited. Any unauthorized 
use or the like by using a plurality of terminals and 
telephone sets can be prevented thereby. 
[0011] 
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[Embodiments] The embodiments of the present invention 
(hereinafter, referred to as "embodiments") will be 
described below with reference to the drawings . 
[0012] Fig. 1 shows the overall structure of an information 
providing system utilizing a device according to an 
embodiment . 

[0013] This system comprises an in-vehicle terminal 100 , a 
base station 200 of a public telephone line, and an 
information center 3 00 for providing the information 
providing service . 

[0014] The terminal 100 comprises a portable telephone set 
10 for performing telephone communication by radio waves as 
the means of communication. This portable telephone set 10 
is connected to a communication control device 12. This 
communication control device 12 controls the portable 
telephone set 10 to acquire information from the information 
center 300 and to control the transmission/reception of 
electronic mail. To perform these controls, the 
communication control device 12 has a built-in modem for 
performing modulation/demodulation for the data 
communication. 

[0015] The portable telephone set 10 is connected to the 
communication control device 12 via a connection unit 
referred to as a cradle which is connected to an antenna, a 
speaker, a microphone, etc., and the cradle may preferably 



be operated as a hands-free telephone set taking over many 
functions of the portable telephone set 10. In this system, 
a built-in modem for data communication may preferably be 
installed in the cradle. 

[0016] A navigation device 14 is connected to the 
communication control device 12. The navigation device 14 
performs various kinds of processing for route guidance. A 
display 16, a speaker 18, an operation unit 20, and a 
storage unit 22 are connected to the communication control 
device 12 and the navigation device 14. The display 16 
comprises a liquid crystal display or the like, and displays 
a map and various kinds of text. An audio speaker or the 
like is also used for the speaker 18, and outputs various 
kinds of guidance sounds and reading voice of the 
information. The operation unit 20 comprises a plurality of 
switches and a touch panel disposed on a front surface of 
the display 16, and various kinds of information are input 
according to the use operation. The storage unit 22 stores 
the received on-line service information, the 
transmitted/received electronic mail, and other information. 
The navigation device 14 comprises a position detector 
including a map database with map data stored therein, and a 
GPS device. 

[0017] On the ground, a large number of the base stations 
200 are provided, and the terminal 100 performs radio 
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communication to/from the closest base station 200. The 
base stations 2 00 are connected to the information center 
300 via a central telephone exchange, and the portable 
telephone set 10 is connected to the information center 3 00 
by making a phone call from the portable telephone set 10. 
[0018] The information center 300 has a communication unit 
30 for controlling the external communication. This 
communication unit 3 0 is connected not only to the terminal 
100 but also to various kinds of external databases, and 
collects various kinds of information. A processing unit 32 
is connected to the communication unit 30. This processing 
unit 32 controls the information via the communication unit 
30. In addition, the processing unit 32 is connected to the 
database 34 having various kinds of information stored 
therein. The processing unit 32 stores various kinds of 
information in this database 34, reads the appropriate 
information from the database 34 as requested, and transmits 
the information via the communication unit 30. 
[0019] An authentication device 3 6 is connected to the 
processing unit 32. The authentication device 36 
authenticates whether or not the terminal 100 making an 
access is a previously registered authorized user. An 
authentication memory 3 8 connected to the authentication 
device 36 stores the data for authenticating the user. 
[0020] When provision of the service (for example, 
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acquisition of information) from the information center 300 
is requested by the terminal 100, the user ID, the password, 
and the user telephone number must be registered in the 
information center 300. This registration may be performed 
with a paper contract, or via an on-line contract system. 
In any case, the user ID, the password, and the user 
telephone number are stored in the authentication memory 38 
of the information center 3 00 through the contract between 
two parties. In addition, the user ID is also stored in the 
terminal 100. This user ID is stored in a non-volatile 
memory which does not lose the stored data when the power 
supply is turned off. 

[0021] "Acquisition of information and authentication 
processing" The processing by which the user acquires 
information from the information center 300 will be 
described with reference to Fig. 2. Firstly, the user 
performs a transmission operation using the operation unit 
20. The communication control device 12 reads the telephone 
number of the portable telephone set 10 (Sll), and then 
transmits it to the information center 3 00 by controlling 
the portable telephone set 10 (S12). When the terminal 100 
is connected to the information center 300, the 
communication control device 12 transmits the user ID and 
the telephone number (S13). Next, it is determined whether 
a password should be asked for (S14), and if it is asked for 



the password is inputted (S15). It is determined whether 
log-in is successful (S16), and if the log-in is successful, 
the information is acquired (S17). This information 
acquisition includes the transmission of a previously 
prepared search expression and the reception of the 
information. When the log-in is unsuccessful , failure 
processing such as retrying and disconnection is performed 
(S18). The information center 300 accepts the matching if 
either the telephone number or the password agrees with the 
previously registered value corresponding to the inputted 
user ID. Thus, if the matching of the telephone number is 
acceptable, the input of the password is not requested, and 
the log-in is successful. 

[0022] Next, the processing in the authentication device 36 
of the information center 300 will be described below with 
reference to Fig. 3. The information center 300 receives 
the user ID and the telephone number when it is connected to 
the terminal 100 (S21). It is determined whether the user 
ID comparison is OK according to whether the user ID is 
stored in the authentication memory 38 (S22). If this 
determination results in YES, then it is determined whether 
a telephone number is input (S23). The telephone number is 
assumed to be inputted from the above-described terminal 100. 
However, if the terminal does not transmit any telephone 
number, this determination results in NO. If the 
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determination in S23 is YES, it is determined whether the 
telephone number comparison is acceptable (OK) according to 
whether or not the telephone number is the telephone number 
stored corresponding to the user ID compared in S22 (S24). 
If the determination results in YES, it is determined that 
the authentication is successful (OK) (S25). As described 
above, authentication is performed without requesting any 
input of the password for a user transmitting an authorized 
telephone number . 

[0023] On the other hand, if the determination results in 
NO in S23 or S24, no authorized telephone number is inputted. 
Thus, input of the password is requested in the terminal 100 
(S26). The password is acquired, and compared (S27). If 
this determination results in OK, the process advances to 
S25, and determination of authentication results in OK. If 
comparison of the password results in NG in S27, the 
authentication is determined to be unsuccessful (NG) because 
neither the telephone number nor the password is successful 
(S28). In addition, if the cocomparison of the user ID is 
unsuccessful in S22, the authentication is determined to be 
NG. 

[0024] As described above, if the authentication is 
determined to be OK in the authentication device 36, the 
control unit 32 provides the information requested by the 
terminal 100. 
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[0025] According to the present embodiment , the input of 
the password is not requested if the telephone number is 
transmitted by using a telephone set registered in the 
information center in advance. Thus, the user can omit the 
input of the password , and receive the information providing 
service. Since the telephone number is specific to the 
telephone set, and the security of this system is higher 
than that of a system for storing both the user ID and the 
password in the terminal. This means that this system can 
prohibit any service mode of providing information by 
storing the same user ID and password in a large number of 
terminals . 

[0026] When a portable telephone set 10 having no 
registered telephone number is used, the information 
providing service can be received by inputting the password. 
Thus, even when a portable telephone set 10 different from 
the registered one is used, the information providing 
service can be received if the password is known. Thus, 
this service is applicable to a case in which the contracted 
authorized user wishes to receive the information providing 
service by using a telephone set belonging to another person. 
Also, when the telephone number of the user is changed, or a 
new telephone set is used, the service can be received by 
inputting the password. 

[0027] The telephone set according to the present 
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embodiment is not limited to a portable telephone set, but 
may be any general telephone set. In the case of the 
portable telephone set 10, not only the transmitter number 
of the telephone company, but also the local telephone 
number of the portable telephone set 10 may be read, and the 
communication control device 12 may provide and transmit 
additional data. In addition, the portable telephone set 10, 
the communication terminal 12, the display 16, the operation 
unit 20, etc. may be integrated with each other. Further, 
if a telephone number notification service for forwarding a 
telephone message by the telephone company is available, the 
transmission of the telephone number can be omitted by 
utilizing this service. 

[002 8] "Change of telephone number" Next, the processing 
in the terminal 100 when the registered telephone number is 
changed will be described with reference to Fig. 4. When 
the telephone number of the user is changed by upgrading the 
telephone set, etc., a new telephone set is connected. The 
processing for changing the registered telephone number is 
started by operating the operation unit 20. When the 
processing is started, the telephone number is read when the 
portable telephone set 10 is connected first (S31). Next, 
transmission of the user ID and the telephone number to the 
information center 300 is performed by controlling the 
portable telephone set 10 (S32). In this processing, the 
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user ID and the telephone number of the connected portable 
telephone set 10 are transmitted. The telephone number 
definitely does not match the registered value, and thus the 
input of the password is requested. A reply as to whether 
or not the user authentication is OK is sent from the 
information center 300 by inputting the password. Then, a 
determination is made as to whether or not the user 
authentication is OK (S33). If the determination results in 
NO, the authentication failure such as line disconnection is 
performed (S38) . 

[002 9] If the determination in S33 results in YES, a 
request for changing the registration of the telephone 
number is given by operating the operation unit 20 (S34). 
The request for changing the registered number is not 
limited to changing the registration by the operation of a 
user, but a request for changing the registration of the 
telephone number may be automatically outputted when it is 
confirmed that the user authentication is OK. When this 
request is accepted, the telephone number of the portable 
telephone set 10 may be transmitted (S35). In addition, the 
telephone number sent during the user authentication may be 
used. 

[0030] As described above, when the registered telephone 
number is updated, a determination is made as to whether or 
not the registration is successful (S36), and if the 
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determination results in YES, processing for the successful 
registration is performed (S37). The information center 300 
sends back the new telephone number together with the user 
ID when the change is completed, and the terminal 100 
preferably performs processing such as displaying the new 
telephone number on the display 16, and requesting 
confirmation by the user. If the determination in S3 6 
results in NO, processing for registration failure, such as 
reception of data regarding the registration failure, is 
perfirmed (S38). 

[0031] Next, the processing in the information center 300 
will be described with reference to Fig. 5. When access is 
made from the terminal 100, and the line is connected, user 
authentication is performed as described above. A 
determination is made as to whether or not the result of the 
authentication is OK (S41). If the determination results in 
NO, the reason for the failure is notified, and the 
authentication failure is processed by disconnecting the 
line. 

[0032] If the determination results in YES in S41, a 
determination is made as to whether or not changing the 
telephone number is requested (S42). If the determination 
results in NO, the regular processing described above is 
performed. On the other hand, if the determination results 
in YES, a new telephone number is acquired, and the 



registration of the telephone number is changed (S43). 
[0033] As described above, according to the present 
embodiment , if the user can be authenticated by inputting 
the password, the change of the registration of the 
telephone number is accepted. Thus, the registered 
telephone number can be easily changed when the telephone 
set is changed. 

[0034] In the above-described example, the input of the 
password is always requested. However, there can be a 
system in which the registered telephone number is changed 
to the transmitted telephone number when the input of the 
password is omitted, and the user ID is recognized. In such 
a system, the registered telephone number can be changed 
only by connecting the portable telephone set 10 to the 
terminal 100, and making access to the information center 
300. Further, in the above configuration, the new telephone 
number is automatically transmitted; however, it also can be 
inputted by the user. 

[0035] Further, the user ID, the registered telephone 
number, etc. are stored in the terminal 100, and if the 
connected portable telephone set 10 is different from the 
registered one, the information may be displayed. If the 
registered telephone number is successfully changed, the 
stored registered telephone number may preferably be changed. 
[0036] "Change of registration prohibited" Changing the 



registration may be prohibited for frequent changes of 
registration in S43 above. As shown in Fig. 6, a 
determination is made as to whether or not at least a time 
Tl has elapsed from the previous change (S51), and the 
registered number is changed only when the determination 
results in YES (S52). If the determination is NO, change of 
registration failure processing is performed (S53). 
[0037] In addition, as shown in Fig. 7, a determination is 
made as to whether or not the number of changes of 
registration within a predetermined time T2 is N or less 
(S61), and change of registration is performed only when the 
determination results in YES (S62), and failure processing 
may be performed when the determination results in NO (S63). 
[0038] The above processing can effectively prohibit any 
unauthorized use such as receiving the service by 
successively making access to the information center 300 
from a large number of terminals 100. 

[0039] "Configuration of terminal" Figs. 8 and 9 show the 
configuration of the terminal 100 shown in Fig. 1. In the 
terminal in Fig. 8, a unit for collecting the information is 
separate from a navigation unit. In the figures, these 
units are indicated by chain lines. 

[0040] The unit for collecting the information comprises 
the portable telephone set 10, the communication control 
device 12, the information processing control unit 24, and 



the storage unit 26. The information processing control 
unit 24 performs the display by the operation of the 
operation unit 20 while changing a screen of the display 16, 
and displays and reads the information acquired by the 
communication. In addition, the storage unit 26 stores the 
ID of the portable telephone set 10, the received on-line 
service information, the transmitted/received electronic 
mail, and the information required and acquired for other 
information collection. The navigation device 14 is 
substantially unnecessary in the information exchange 
to/from the information center 3 00 in accordance with the 
present invention and the output of the results, and the 
display 16 and the operation unit 2 0 are connected to the 
information processing control unit 24 via the navigation 
device 14. In this example, the communication control 
device 12 controls the operation of the portable telephone 
set 10. 

[0041] The navigation system of this example is referred to 
as an integrated type, and the navigation unit integrally 
comprises the navigation device 14, the display 16, the 
operation unit 20, and the storage unit 22. The storage 
unit 22 stores data for the navigation. 

[0042] The navigation system of the example in Fig. 9 is 
referred to as a separate type, in which the navigation unit 
comprises the navigation device 14 and the storage unit 22 




- 19 - 

for the navigation, and the display 16 is separate from the 
operation unit 20. The display 16 and the operation unit 20 
are directly connected to the information processing control 
unit 24. The information processing control unit 24 
directly receives the input from the operation unit 20 via 
the navigation device 14, and controls the display of the 
display 16. Other points such as the operations of the 
navigation system are similar to those of the example in Fig. 
8. 

[0043] 

[Advantages] As described above, in accordance with the 
present invention, rapid authentication can be performed 
without requiring any input of the password by performing 
the authentication using the telephone number. In addition, 
unauthorized use can be effectively prevented by prohibiting 
registration changes according to the frequency of the 
registration changes. 
[Brief Description of the Drawings] 

[Fig. 1] Fig. 1 is a block diagram showing the overall 
configuration of the system. 

[Fig. 2] Fig. 2 is a flowchart showing the information 
acquiring operation in the terminal. 

[Fig. 3] Fig. 3 is a flowchart showing the authentication 
operation in the information center. 

[Fig. 4] Fig. 4 is a flowchart showing the operation of 
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changing the registration of the telephone number in the 
terminal . 

[Fig. 5] Fig. 5 is a flowchart showing the operation of 
changing the registration of the telephone number in the 
information center. 

[Fig. 6] Fig. 6 is a flowchart showing the operation of 
prohibiting changing the registration of the telephone 
number . 

[Fig. 7] Fig. 7 is a flowchart showing another example of 
the operation of prohibiting changing the registration of 
the telephone number. 

[Fig. 8] Fig. 8 shows an example of the configuration of 
the terminal. 

[Fig. 9] Fig. 9 shows another example of the configuration 

of the terminal. 

[ Reference Numerals ] 

10 portable telephone set 

12 communication control device 

14 navigation device 

16 display 

18 speaker 

20 operation unit 

22 and 26 storage unit 

24 information processing control unit 
30 communication unit 
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32 processing unit 

34 database 

36 authentication device 

3 8 authentication memory 

100 terminal 

200 base station 

300 information center 
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FIG. 1 

2 00 BASE STATION 

3 0 COMMUNICATION UNIT 
32 PROCESSING UNIT 

34 DATABASE 

36 AUTHENTICATION DEVICE 

38 AUTHENTICATION MEMORY 

10 PORTABLE TELEPHONE SET 

12 COMMUNICATION CONTROL DEVICE 

14 NAVIGATION DEVICE 

1 8 SPEAKER 

16 DISPLAY 

20 OPERATION UNIT 

22 STORAGE UNIT 

OVERALL CONFIGURATION 

FIG. 2 

511 READ TELEPHONE NUMBER 

512 TRANSMISSION 

513 TRANSMIT USER ID AND USER TELEPHONE NUMBER 

514 SHOULD PASSWORD BE ASKED FOR? 

515 INPUT PASSWORD 
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51 6 IS LOG-IN SUCCESSFUL? 

51 7 INFORMATION ACQUISITION PROCESSING 

518 FAILURE PROCESSING 

FIG. 3 

521 RECEIVE USER ID AND TELEPHONE NUMBER 

522 IS COMPARISON OF USER ID OK? 

523 IS TELEPHONE NUMBER INPUTTED? 

524 IS COMPARISON OF TELEPHONE NUMBER OK? 

526 REQUEST FOR INPUTTING PASSWORD 

527 IS COMPARISON OF PASSWORD OK? 

525 AUTHENTICATION SUCCESSFUL 

528 AUTHENTICATION UNSUCCESSFUL 

FIG. 4 

531 READ TELEPHONE NUMBER 

532 TRANSMISSION 

533 IS AUTHENTICATION OK? 

53 4 REQUEST FOR CHANGE 

53 5 TRANSMIT TELEPHONE NUMBER 

53 6 IS CHANGE OF REGISTRATION SUCCESSFUL? 

537 REGISTRATION SUCCESS PROCESSING 

53 8 REGISTRATION FAILURE PROCESSING 
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FIG. 5 

541 IS AUTHENTICATION OK? 

-> AUTHENTICATION FAILURE PROCESSING 

542 IS CHANGE OF TELEPHONE NUMBER REQUESTED? 
-> NORMAL PROCESSING 

543 CHANGE TELEPHONE NUMBER 

FIG. 6 

551 HAS AT LEAST Tl ELAPSED. SINCE PREVIOUS REVISION? 

552 CHANGE REGISTRATION OF TELEPHONE NUMBER 

553 CHANGE OF REGISTRATION FAILURE PROCESSING 

FIG. 7 

561 IS FREQUENCY OF CHANGING WITHIN PREDETERMINED TIME T2 
SMALLER THAN N? 

562 CHANGE REGISTRATION OF TELEPHONE NUMBER 

563 CHANGE OF REGISTRATION FAILURE PROCESSING 

FIG. 8 



10 PORTABLE TELEPHONE SET 
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12 COMMUNICATION CONTROL DEVICE 

26 STORAGE UNIT 

24 INFORMATION PROCESSING CONTROL UNIT 

14 NAVIGATION DEVICE 

18 SPEAKER 

16 DISPLAY 

20 OPERATION UNIT 

22 STORAGE UNIT 

FIG. 9 

10 PORTABLE TELEPHONE SET 

12 COMMUNICATION CONTROL DEVICE 

2 6 STORAGE UNIT 

24 INFORMATION PROCESSING CONTROL UNIT 

14 NAVIGATION DEVICE 

22 STORAGE UNIT 

18 SPEAKER 

16 DISPLAY 

2 0 OPERATION UNIT 



